6.7
Medium
CVE-2025-21199 Improper privilege management in Azure Agent Installer allows an authorized attacker to elevate privileges locally
Description
Improper privilege management in Azure Agent Installer allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure Agent for Site Recovery 1.0 | 1.0.0 → < 9.30 | 9.30 |
| Azure Agent for Backup 1.0 | 1.0.0 → < 2.0.9940.0 | 2.0.9940.0 |